Series
Trusting the Machine
1 parts, in order.
- 01
Sep 24, 2026
Your Agent Opened a Folder — The Folder Opened You.
AI coding agents auto-run git status, which can trigger a poisoned fsmonitor setting inside a zipped repo, silently running attacker code. Update tools, sandbox, disable fsmonitor.